varenc

5 ms·

1.
by varenc 6d ago
> notice they have a dom.webgpu.blocked-domains with the sole entries being "easyeda.com,*.easyeda.com", I wonder what that's about? I found this issue: https://bugzilla.mozilla.org/show_bug.cgi?id=1980392
2.
by varenc 6d ago
Their showcase examples[0] link to GitHub but the links 404. Like this one for the Slack agent: https://github.com/OpenAI-Early-Access/agents-api-python-pre... Guessing this an early release not quite ready for the pub
3.
by varenc 11d ago
> I think big things are coming for this world and by and large they are not ready for it. With regard to PCB design, I'm curious if can you add more color to how the world isn't ready for this in particular? I don't thin
4.
by varenc 12d ago
I disagree about JIT performance not mattering. I enabled "Lockdown Mode" on iOS which disables the JIT for the mentioned security reasons, and it causes a very noticeable lagginess on many sites. Of course, the primary cause is t
5.
by varenc 29d ago
Using energy always raises nearby temperatures since all energy becomes heat. If any facility is using 36 MW of electricity, then 36 MW of heat is going to be entering the environment somewhere. Though I think what's interesting here
6.
by varenc 29d ago
It's interesting that Claude for Goverment has had perfect 100% uptime in the past 90 days, while the rest of the services are around 99.4%: https://status.claude.com/ Really shows how isolated their government systems
7.
by varenc 1mo ago
The part about K3 is just very strong evidence that K3 is partly a distillation of Opus. Probably even a distillation of Opus's CoT, which means they already had broken CoT encryption themselves awhile ago.
8.
by varenc 1mo ago
If CoT wasn't stateless and you instead just got a reference which pointed to the CoT stored on the lab servers, the same vulnerability would still exist. Since you just need a weaker jailbroken model to read a smarter model's CoT
9.
by varenc 1mo ago
This article shows that when Kimi3's chain of thought is prefilled to match Opus's, the rest of the chain of thoughts Kimi3 outputs very closely aligns with Opus's. That seems strong evidence that Kimi3 is partly a distillat
10.
by varenc 1mo ago
By some interpretations protecting your frontier model with strong safeguards from being distilled into an open source model without safeguards is a safety issue.
11.
by varenc 1mo ago
The compaction prompt doesn't seem like the valuable thing here. I suspect they're protecting the compaction result itself. If you're trying to distill a model, collecting lots of examples on how a large conversation gets co
12.
by varenc 1mo ago
super interesting. So pre-filling Kimi3 reasoning with Opus's reasoning results in thoughts that closely match Opus's. This seems like strong evidence Kimi3 was trained on decrypted Opus chain-of-thought. Meaning the Kimi team li
13.
by varenc 1mo ago
HuggingFace's use of models in this incident keeps getting characterized this way but it's not true that HG used GLM-5.2 to "save them" from OAI's attack. OAI's model had already hacked and compromised HG by t
14.
by varenc 1mo ago
There's been a moratorium on new billboards in SF for a long time already. No new ones are getting built. Given the reliable revenue they provide, will be a long time before they naturally go extinct.
15.
by varenc 1mo ago
hah thanks for the deep dive on this. I wanted to investigate myself but figured someone on HN would be faster at it. Makes sense it's not helpful, alas.
16.
by varenc 1mo ago
Can someone help me understand the underlying motivation behind this? It makes sense that some crawlers, in the style of Google, would want to index the entire internet. But what is the point of the same crawler re-fetching a page they al
17.
by varenc 1mo ago
Theres always going to be some negative externality effecting people that live near anything getting built. Even if the operational data center isn't loud enough to be heard beyond its property lines, the construction process will be l
18.
by varenc 1mo ago
likely because your browser is enforcing that you always go to the HTTPS URL. Your link above works fine for me.
19.
by varenc 1mo ago
it's not serving HTTPS at all, it's HTTP only. Port 80 is open, port 443 isn't.
20.
by varenc 1mo ago
Cosmically I feel like the HTTPS certificate on Cloudflare.pay should provide sufficient info to confirm it's the same entity behind Cloudflare.com
21.
by varenc 1mo ago
It handles these circumstances. Definitely seen it cross to the other side with oncoming traffic to get around a truck blocking a lane. For the signal light, never experienced that, but I imagine after awhile it'd figure it out. Possib
22.
by varenc 2mo ago
The poster: https://cdn.saffire.com/images.ashx?t=ig&rid=OhioStateFair&i... Note the pigs are numbered 1, 2, 1. And the gondola with a floating cable and another that terminates at a tent top.
23.
by varenc 2mo ago
It's interesting how much of the value here is providing the english Skill definitions that tell the LLM what to do: https://github.com/openai/codex-security/tree/main/sdk/types... Some of appr
24.
by varenc 2mo ago
You're ignoring the asymmetry with security. The attacker just needs one exploit chain, whereas the defender needs to block every avenue. Open access to models with no guardrails greatly benefits the attackers more than the defenders.
25.
by varenc 2mo ago
the ' that happened ' makes it too long for the HN submission title length limit. Maybe simonw can suggest an alternative title that fits within the limit, that doesn't misrepresent the post.
26.
by varenc 2mo ago
Agreed. Big love for exe.dev. For quick low stakes projects, using their Shelly assistant is the simplest way to give an LLM a fully persistent VM with web services I've found.
27.
by varenc 2mo ago
Digression: You can link directly to a page in a pdf with a url like this: https://arxiv.org/pdf/2607.13335#page=27
28.
by varenc 2mo ago
The way source maps are used by dark net sites, and the reason it exists, are probably unrelated! I think it was just an early form of using image tiling for big efficiency gains. Now with HTTP2/QUIC you can request many small individu
29.
by varenc 2mo ago
great point! Though what about the default windows APIs for 'calling out to shell'. Like using `subprocess.run(...)` in Python. My suspicion is that works like cmd.exe? edit: answered myself. Seems like subprocess.run works like
30.
by varenc 2mo ago
fun fact: source maps are used by some Tor onion sites ("dark net") as part of a captcha process without using JavaScript. If you present the user with an image, and ask them to click on a particular part of it, the server can re

More ›